CCAK Question 77

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C. Incident response plans Incident response plans are considered corrective controls because they provide a structured approach for addressing and managing security incidents after they occur. These plans aim to reduce the impact of an incident, facilitate recovery, and prevent future occurrences by learning from the event and implementing improvements. Corrective controls are designed to rectify issues and restore normal operations. In contrast, log monitoring, penetration testing, and vulnerability scans are typically considered preventive or detective controls. Log monitoring helps detect and identify potential security incidents, penetration testing assesses vulnerabilities to prevent exploitation, and vulnerability scans identify weaknesses to be addressed before they can be exploited.

• Chose C1

  Which of the following is a corrective control that may be identified in a SaaS service provider? A. Log monitoring B. Penetration testing C. Incident response plans D. Vulnerability scan

• Chose C1

  Corrective Controls CCAK Pg 241  Backup and restore  Reboot systems  Configure incident rules  Business continuity  Incident response  Renew access cards  Fire extinguisher